CA-ACF2 VM interface - Revision history

JAL: /* AUTHCTL VIEW command */ minor wordsmithing

2018-04-19T23:48:50Z

AUTHCTL VIEW command: minor wordsmithing

← Older revision		Revision as of 23:48, 19 April 2018
Line 523:		Line 523:
	===AUTHCTL VIEW command===		===AUTHCTL VIEW command===
	<p>		<p>
	The <var>[[AUTHCTL command\|AUTHCTL VIEW]]</var> command displays the interface control options currently in effect for the active interface (CCASTAT and ACF2GEN). As of version 7.7 of Model 204, the command also displays a list of all the <em>sets</em> of control options that are available to the interface ~~if specified by~~ the <var>[[#SECPLIST parameter\|SECPLIST]]</var> parameter. </p>		The <var>[[AUTHCTL command\|AUTHCTL VIEW]]</var> command displays the interface control options currently in effect for the active interface (CCASTAT and ACF2GEN). As of version 7.7 of Model 204, the command also displays a list of all the <em>sets</em> of control options that are available to the interface (and potential values of the <var>[[#SECPLIST parameter\|SECPLIST]]</var> parameter). </p>
			<p>
	<p>The syntax is ~~as follows~~: </p>		The syntax is:
			</p>
	<p class="code">AUTHCTL VIEW </p>		<p class="code">AUTHCTL VIEW </p>
	<p>or</p>		<p>
			Or:</p>
	<p class="code">AUTHCTL VIEW ACF2</p>		<p class="code">AUTHCTL VIEW ACF2</p>
			<p>
	For information about setting control information, see [[#Preparing ACF2PARM with ACF2GEN\|Preparing ACF2PARM with ACF2GEN]].		For information about setting control information, see [[#Preparing ACF2PARM with ACF2GEN\|Preparing ACF2PARM with ACF2GEN]]. </p>

	==Maintaining the CA-ACF2 VM Interface==		==Maintaining the CA-ACF2 VM Interface==

JAL: /* Updating Model 204 EXECs */ typo

2018-04-19T20:31:38Z

Updating Model 204 EXECs: typo

← Older revision		Revision as of 20:31, 19 April 2018
Line 1,395:		Line 1,395:
	==Updating Model 204 EXECs==		==Updating Model 204 EXECs==
	<p>		<p>
	If Model 204 issues its own CA-ACF2 diagnoses online, and it does not send its CA-ACF2 requests to the security service machine, you must add a FILEDEF for the ACFSRF LOADLIB to these EXECs:		If Model 204 issues its own CA-ACF2 diagnoses online, and it does not send its CA-ACF2 requests to the security service machine, you must add a FILEDEF for the ACFSRF LOADLIB to these EXECs: </p>
	<ul>		<ul>
	<li>The <code>EXEC1</code> and <code>EXEC2</code> EXECs that are part of the EXEC ONLINE command </li>		<li>The <code>EXEC1</code> and <code>EXEC2</code> EXECs that are part of the EXEC ONLINE command </li>

JAL: misc formatting

2018-04-19T20:22:02Z

misc formatting

Show changes

JAL: /* AUTHCTL VIEW command */ typo

2018-04-19T19:33:24Z

AUTHCTL VIEW command: typo

← Older revision		Revision as of 19:33, 19 April 2018
Line 523:		Line 523:
	===AUTHCTL VIEW command===		===AUTHCTL VIEW command===
	<p>		<p>
	The <var>[[AUTHCTL command\|AUTHCTL VIEW]]</var> command displays the interface control options currently in effect for the active interface (CCASTAT and ACF2GEN). As of version 7.7 of Model 204, the command also displays a list of all the <em>sets</em> of control options that are available to the interface if specified by the <var>SECPLIST</var> parameter. p</p>		The <var>[[AUTHCTL command\|AUTHCTL VIEW]]</var> command displays the interface control options currently in effect for the active interface (CCASTAT and ACF2GEN). As of version 7.7 of Model 204, the command also displays a list of all the <em>sets</em> of control options that are available to the interface if specified by the <var>SECPLIST</var> parameter. </p>

	<p>The syntax is as follows: </p>		<p>The syntax is as follows: </p>

JAL: /* AUTHCTL VIEW command */ typo

2018-04-19T19:33:02Z

AUTHCTL VIEW command: typo

← Older revision		Revision as of 19:33, 19 April 2018
Line 523:		Line 523:
	===AUTHCTL VIEW command===		===AUTHCTL VIEW command===
	<p>		<p>
	The <var>[[AUTHCTL command\|AUTHCTL VIEW]]</var> command displays the interface control options currently in effect for the active interface (CCASTAT and ACF2GEN). As of version 7.7 of Model 204, the command also displays a list of all the <em>sets</em> of control options that are available to the ~~intrerface~~ if specified by the <var>SECPLIST</var> parameter. p</p>		The <var>[[AUTHCTL command\|AUTHCTL VIEW]]</var> command displays the interface control options currently in effect for the active interface (CCASTAT and ACF2GEN). As of version 7.7 of Model 204, the command also displays a list of all the <em>sets</em> of control options that are available to the interface if specified by the <var>SECPLIST</var> parameter. p</p>

	<p>The syntax is as follows: </p>		<p>The syntax is as follows: </p>

JAL: /* AUTHCTL VIEW command */ add 7.7 info

2018-04-18T23:44:46Z

AUTHCTL VIEW command: add 7.7 info

← Older revision		Revision as of 23:44, 18 April 2018
Line 523:		Line 523:
	===AUTHCTL VIEW command===		===AUTHCTL VIEW command===
	<p>		<p>
	The <var>[[AUTHCTL command\|AUTHCTL VIEW]]</var> command displays the interface control options currently in effect for the active interface (CCASTAT and ACF2GEN). </p>		The <var>[[AUTHCTL command\|AUTHCTL VIEW]]</var> command displays the interface control options currently in effect for the active interface (CCASTAT and ACF2GEN). As of version 7.7 of Model 204, the command also displays a list of all the <em>sets</em> of control options that are available to the intrerface if specified by the <var>SECPLIST</var> parameter. p</p>

	<p>The syntax is as follows: </p>		<p>The syntax is as follows: </p>
Line 531:		Line 531:
	<p class="code">AUTHCTL VIEW ACF2</p>		<p class="code">AUTHCTL VIEW ACF2</p>

	(For information about setting control information, see [[#Preparing ACF2PARM with ACF2GEN\|Preparing ACF2PARM with ACF2GEN]]).		For information about setting control information, see [[#Preparing ACF2PARM with ACF2GEN\|Preparing ACF2PARM with ACF2GEN]].

	==Maintaining the CA-ACF2 VM Interface==		==Maintaining the CA-ACF2 VM Interface==

JAL: misc formatting

2018-04-18T23:31:04Z

misc formatting

Show changes

JAL: misc formatting

2018-04-18T22:56:21Z

misc formatting

Show changes

JAL: /* Defining user privileges */ add link

2018-04-18T22:31:53Z

Defining user privileges: add link

← Older revision		Revision as of 22:31, 18 April 2018
Line 553:		Line 553:

	===Defining user privileges===		===Defining user privileges===
			<p>
	<p>You must identify Model 204 privileges to CA-ACF2. </p>		You must identify Model 204 privileges to CA-ACF2. </p>
			<p>
	<p>The Model 204 privileges for CA-ACF2 users are defined as CA-ACF2 Generalized Resource Rules. The RESOURC argument of ACF2GEN is used along with fixed CA-ACF2 key names. If an argument is not specified, RESOURC defaults to 204. </p>		The Model 204 privileges for CA-ACF2 users are defined as CA-ACF2 Generalized Resource Rules. The <code>RESOURC</code> argument of ACF2GEN is used along with fixed CA-ACF2 key names. If an argument is not specified, <code>RESOURC</code> defaults to <code>204</code>. </p>
			<p>
	<p>The following user privilege names define the possible privilege rules for a user. See [[~~LOGCTL_command~~:~~_Modifying_user_ID_entries_in_the_password_table~~\|LOGCTL]] for more information on ~~the~~ LOGCTL ~~command~~.</p>		The following user privilege names define the possible privilege rules for a user. See [[LOGCTL command: Modifying user ID entries in the password table\|LOGCTL command]] for more information on <var>LOGCTL</var>. </p>

	<table>		<table>
	<tr>		<tr class="head">
	<th>This privilege... </th>		<th>This privilege... </th>

	<th>Defines users who can... </th>		<th>Defines users who can... </th>

	<th>Corresponding LOGCTL setting </th>		<th>Corresponding LOGCTL setting </th>
	</tr>		</tr>

	<tr>		<tr>
	<td>~~‘PRIV~~.SUPER.~~USER’~~ </td>		<td>'PRIV.SUPER.USER' </td>

	<td>Exercise superuser privilege and can create a file with the CREATE command.</td>		<td>Exercise superuser privilege and can create a file with the CREATE command.</td>
			<td>X'80' </td>
	<td>~~X‘80’~~ </td>
	</tr>		</tr>

	<tr>		<tr>
	<td>~~‘PRIV~~.SYSTEM.~~ADMIN’~~ </td>		<td>'PRIV.SYSTEM.ADMIN' </td>

	<td>Exercise system administrator privilege and issue commands such as LOGWHO, MONITOR, PRIORITY, and WARN. </td>		<td>Exercise system administrator privilege and issue commands such as LOGWHO, MONITOR, PRIORITY, and WARN. </td>
			<td>X'40' </td>
	<td>~~X‘40’~~ </td>
	</tr>		</tr>

	<tr>		<tr>
	<td>~~‘PRIV~~.CHANGE.FILE.~~PASSWORD’~~ </td>		<td>'PRIV.CHANGE.FILE.PASSWORD' </td>

	<td>Change CCASTAT file passwords when opening a file. </td>		<td>Change CCASTAT file passwords when opening a file. </td>
			<td>X'20' </td>
	<td>~~X‘20’~~ </td>
	</tr>		</tr>

	<tr>		<tr>
	<td>~~‘PRIV~~.SYSTEM.~~MANAGER’~~ </td>		<td>'PRIV.SYSTEM.MANAGER' </td>

	<td>Issue system manager commands, that is issue all system administrator commands plus certain other privileged commands. </td>		<td>Issue system manager commands, that is issue all system administrator commands plus certain other privileged commands. </td>
			<td>X'08' </td>
	<td>~~X‘08’~~ </td>
	</tr>		</tr>

	<tr>		<tr>
	<td>~~‘PRIV~~.OVERRIDE.RECORD.~~SECURITY’~~ </td>		<td>'PRIV.OVERRIDE.RECORD.SECURITY' </td>

	<td>Override record security. </td>		<td>Override record security. </td>
			<td>X'04' </td>
	<td>~~X‘04’~~ </td>
	</tr>		</tr>
	</table>		</table>

	For CCASTAT users, privileges are defined to the CCASTAT user ID by the Model 204 LOGCTL command. The LOGCTL command contains an additional privilege bit (~~X‘10’~~) that indicates whether or not CCASTAT users can change their own login passwords at login time. This privilege bit is not required for the CA-ACF2 VM Interface, because you set this privilege for all CA-ACF2 users within CA-ACF2.		For CCASTAT users, privileges are defined to the CCASTAT user ID by the Model 204 <var>LOGCTL</var> command. The <var>LOGCTL</var> command contains an additional privilege bit (X'10') that indicates whether or not CCASTAT users can change their own login passwords at login time. This privilege bit is not required for the CA-ACF2 VM Interface, because you set this privilege for all CA-ACF2 users within CA-ACF2.

	===Security service machine===		===Security service machine===

JAL: /* AUTHCTL VIEW command */ add link

2018-04-18T22:24:07Z

AUTHCTL VIEW command: add link

← Older revision		Revision as of 22:24, 18 April 2018
Line 537:		Line 537:

	===AUTHCTL VIEW command===		===AUTHCTL VIEW command===
			<p>
	<p>The <var>AUTHCTL VIEW</var> command displays the interface control options currently in effect for the active interface (CCASTAT and ACF2GEN). </p>		The <var>[[AUTHCTL command\|AUTHCTL VIEW]]</var> command displays the interface control options currently in effect for the active interface (CCASTAT and ACF2GEN). </p>

	<p>The syntax is as follows: </p>		<p>The syntax is as follows: </p>